This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json) Hash identifier: wVPcFTlEzMbrYYx6HiFbeXCqw8PC3Ym+UVEM87uv1iY= Subject key identifier: 02:ED:00:65:A2:5C:69:5C:3A:B6:D9:6C:CD:04:64:4F:DD:0A:3C:C9 Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3 Certificate serial: 019B2EFA8DB84EC0B664405078D62DB3BE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft Manifest number: 0267 Signing time: Thu 18 Dec 2025 01:02:10 +0000 Manifest this update: Thu 18 Dec 2025 01:02:10 +0000 Manifest next update: Fri 19 Dec 2025 01:02:10 +0000 Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: EWiRSDoAQ/b7MRqhtSbasrz/0jRCexCvdhtukubCH7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:8d:b8:4e:c0:b6:64:40:50:78:d6:2d:b3:be:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3 Validity Not Before: Dec 18 01:02:10 2025 GMT Not After : Dec 19 01:02:10 2025 GMT Subject: CN=02ed0065a25c695c3ab6d96ccd04644fdd0a3cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:44:aa:46:2c:ec:d9:dc:0d:40:68:fc:d0: d4:7e:a1:03:89:0c:36:1b:42:f5:3d:7b:16:1e:7a: 74:21:23:b9:4b:6f:40:40:a1:8b:fe:22:a3:2b:59: c7:cc:c8:c6:b2:c0:a1:f0:1f:73:54:86:74:67:61: ab:96:90:4e:f7:66:5d:75:32:dd:ba:07:1b:ed:ca: a0:08:0f:9b:31:93:b3:79:16:85:18:11:7d:fa:96: a5:1e:e3:bc:42:82:92:f3:66:d8:76:06:62:1e:d4: a5:d2:08:89:08:77:9c:e7:ca:b6:15:08:cc:9f:38: a8:33:cf:24:8e:80:09:30:cb:e4:9f:cd:37:c6:c0: e8:b1:40:0a:0c:35:82:64:16:ec:2f:50:29:af:82: 7b:72:dc:bc:7f:d9:19:84:d6:e3:ab:15:60:29:11: a8:f6:fc:81:5f:94:9a:62:84:d7:b5:be:dd:f8:c2: cc:fa:5c:9b:cd:b7:c4:ec:1b:f5:8a:3a:e2:73:d7: 22:30:54:cb:fa:35:94:64:fb:71:ec:48:c3:df:5f: bc:17:63:1f:73:b8:a4:24:b0:70:95:dc:71:51:f9: f9:10:d7:93:57:67:df:01:e6:c0:f3:7c:17:3a:ee: 21:a6:d8:97:1d:59:6d:cd:15:ea:9a:0e:bb:0a:3d: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:ED:00:65:A2:5C:69:5C:3A:B6:D9:6C:CD:04:64:4F:DD:0A:3C:C9 X509v3 Authority Key Identifier: keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:39:b7:44:fc:63:c3:43:e2:8d:0c:ed:bf:60:a7:27:20:d8: 6f:7c:ab:ea:81:8c:40:ca:e4:e0:42:33:34:f8:e5:1a:b4:07: 78:49:1f:e6:3e:10:84:93:34:32:9b:eb:20:73:fd:22:bb:ad: 90:b5:af:6c:ed:29:6e:05:29:51:99:6f:91:8b:e3:3c:58:e2: 4a:8a:89:47:b6:e4:3d:9c:83:e3:1b:a3:fb:1a:13:ac:f9:e9: b6:4b:35:9c:12:8e:23:52:2f:16:bb:e0:48:f3:23:c9:b1:af: f8:70:4a:60:53:a9:0a:6f:32:e2:f7:91:5e:5c:08:7e:ca:e6: 88:41:ff:d5:85:47:72:42:ab:d2:3d:6f:34:02:b2:c7:59:62: 9b:7d:78:0d:d5:25:db:97:ef:b2:04:99:86:18:eb:01:02:8c: 7f:cd:a6:6a:07:d7:0f:95:92:9f:b9:36:dd:fb:39:34:62:0b: 1f:4c:51:a3:2a:d6:2d:e6:10:f5:8c:cb:59:73:c3:78:5f:4d: 5b:2e:4d:c8:4a:da:68:11:31:01:dd:3e:bf:65:07:a8:57:b7: 98:5c:9f:8e:d6:c7:ca:43:5b:c3:60:19:76:cd:0d:2f:75:2e: 98:c3:0a:f5:50:56:13:6e:8a:53:7c:4e:e2:a0:95:4d:e4:87: f3:6a:f2:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+o24TsC2ZEBQeNYts749MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDdlN2MzNzJhOWRiMDkzMzJjNDc5YzcyOTFiODYyOTcy MWFmZTMwHhcNMjUxMjE4MDEwMjEwWhcNMjUxMjE5MDEwMjEwWjAzMTEwLwYDVQQD EygwMmVkMDA2NWEyNWM2OTVjM2FiNmQ5NmNjZDA0NjQ0ZmRkMGEzY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlltEqkYs7NncDUBo/NDUfqEDiQw2 G0L1PXsWHnp0ISO5S29AQKGL/iKjK1nHzMjGssCh8B9zVIZ0Z2GrlpBO92ZddTLd ugcb7cqgCA+bMZOzeRaFGBF9+palHuO8QoKS82bYdgZiHtSl0giJCHec58q2FQjM nzioM88kjoAJMMvkn803xsDosUAKDDWCZBbsL1Apr4J7cty8f9kZhNbjqxVgKRGo 9vyBX5SaYoTXtb7d+MLM+lybzbfE7Bv1ijric9ciMFTL+jWUZPtx7EjD31+8F2Mf c7ikJLBwldxxUfn5ENeTV2ffAebA83wXOu4hptiXHVltzRXqmg67Cj1nbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALtAGWiXGlcOrbZbM0EZE/dCjzJMB8GA1UdIwQY MBaAFJ4H58NyqdsJMyxHnHKRuGKXIa/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgt NTdiNDBmY2VkODI5LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgtNTdiNDBmY2VkODI5 LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDm3RPxj w0PijQztv2CnJyDYb3yr6oGMQMrk4EIzNPjlGrQHeEkf5j4QhJM0MpvrIHP9Irut kLWvbO0pbgUpUZlvkYvjPFjiSoqJR7bkPZyD4xuj+xoTrPnptks1nBKOI1IvFrvg SPMjybGv+HBKYFOpCm8y4veRXlwIfsrmiEH/1YVHckKr0j1vNAKyx1lim314DdUl 25fvsgSZhhjrAQKMf82magfXD5WSn7k23fs5NGILH0xRoyrWLeYQ9YzLWXPDeF9N Wy5NyEraaBExAd0+v2UHqFe3mFyfjtbHykNbw2AZds0NL3UumMMK9VBWE26KU3xO 4qCVTeSH82ry4g== -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:47 2025 by rpki-client